CVE-2006-6681

CVE-2006-6681: Pedro Lineu Orso chetcpasswd 2.3.3 is vulnerable because it does not implement a rate limit on client requests, potentially allowing remote attackers to perform dictionary attacks to guess passwords. The cited sources (NVD/NVD page) confirm the issue and its impact as a partial con...

PostgreSQL database management system multiple DoS conditions

Multiple DoS conditions on executing client requests...

xine-cddb-server.pl.txt

!/usr/bin/perl -- xine-cddb-server by Ulf Harnhammar in 2005 I hereby place this program in the public domain. use strict; use IO::Socket; $main::port = 8880; $main::timeout = 5; SUBROUTINES sub mysend$$ my $file = shift; my $str = shift; print $file "$str\n"; print "SENT: $str\n"; sub mysend sub...

Webcache Client Requests bypasses OHS mod_access restrictions

Name Webcache Client Requests bypasses OHS modaccess Restrictions Systems Affected Oracle Application Server - OHS 1.0.2 - 10.x Severity Low Risk Category Bypass protected URLs via Webcache Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 26 Apr 200...

Mandrake Linux Security Advisory : ypserv (MDKSA-2003:072)

A vulnerability was found in versions of ypserv prior to version 2.7. If a malicious client were to query ypserv via TCP and subsequently ignore the server's response, ypserv will block attempting to send the reply. The result is that ypserv will fail to respond to other client requests. ypserv 2...

CVE-2004-0405: Undefined Security Weakness

CVS before 1.11 allows CVS clients to read arbitrary files via .. dot dot sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180...

Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerability

Description Microsoft has reported a buffer overflow vulnerability in Windows Media Services. This is due to a problem with how the logging ISAPI extension handles incoming client requests. This could cause arbitrary code execution in IIS, which is exploitable through Media Services. Technologies...

Fake Identd 0.9/1.x - Client Query Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/5351/info Fake Identd is an open source Ident server designed to return the same information to all incoming requests. It is implemented by Tomi Ollila, and available for Linux and a number of other Unix based operating systems. Reportedly, some versio...

Переролнение буфера в VPN-1/FireWall-1 Management Servers (buffer overflow)

Переполнение буфера при некорректном запросе от клиента...

iParty-DoS.txt

Date: Mon, 30 Nov 1998 21:46:52 -0600 From: HD Moore Reply-To: Bugtraq List To: [email protected] Subject: iParty can be shut down remotely -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iParty is an audio/text chat program for Windows. The iParty server listens on a specified port 6004 is...